CVE-1999-1405

Summary

CVE-1999-1405 is a vulnerability affecting the snap command in AIX versions prior to 4.3.2. This issue arises due to the command creating the /tmp/ibmsupt directory with world-readable permissions and failing to remove it when executing snap -a. Malicious local users can exploit this weakness by creating a file named /tmp/ibmsupt/general/passwd, allowing them to access the shadowed password file before root runs snap -a, potentially compromising system security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.